Inferring undesirable behavior from P2P traffic analysis

SIGMETRICS/Performance'09 - Proceedings of the 11th International Joint Conference on Measurement and Modeling of Computer Systems

Volumn 37, Issue 1, 2009, Pages 25-36

  Torres, Ruben D ^a   Hajjat, Mohammad Y ^a   Rao, Sanjay G ^a   Mellia, Marco ^b   Munafò, Maurizio M ^b  

^a PURDUE UNIVERSITY   (United States)

^b POLITECNICO DI TORINO   (Italy)

Author keywords

Measurement; P2P

Indexed keywords

CLUSTERING TECHNIQUES; DDOS ATTACK; DOMAIN KNOWLEDGE; END-USERS; FILE-SHARING SYSTEM; FLOW-LEVEL; NETWORK OPERATOR; OFFLINE; P2P SYSTEM; PEER-TO-PEER SYSTEM; POINT OF PRESENCE; REAL TRAFFIC; SEMI-AUTOMATED; SYSTEMATIC ANALYSIS; TIME INTERVAL; TRAFFIC ANALYSIS; TRAFFIC CHARACTERISTICS; UNWANTED TRAFFIC; WEALTH OF INFORMATION;

CLIENT SERVER COMPUTER SYSTEMS; INTERNET SERVICE PROVIDERS; NETWORK PERFORMANCE; SYSTEMS ENGINEERING;

COMPUTER SYSTEMS;

EID: 70449643286     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1555349.1555353     Document Type: Conference Paper

References (36)

1. eMule forum :: Fake Server List And Ip Numbers. http://forum. emuleproject. net/index.php?showtopic=120066.
2. eMule forum: Repeated Kad Errors. http://forum.emuleproject. net/index.php?showtopic=133799.
3. I-BlockList. http://www.IBlocklist.com.
4. Is the Skype outage really a big deal? http://news.cnet.com/8301-10784-3- 9761673-7.html.
5. A. Banerjee, M. Faloutsos, and L. Bhuyan. The P2P war: Someone is monitoring your activities. In ScienceDirect, pages 1272-1280, 2008.
6. Adunanza. http://www.adunanza.net/.
7. E. Athanasopoulos, K.G.Anagnostakis, and E. Markatos. Misusing Unstructured P2P Systems to Perform DoS Attacks: The Network That Never Forgets. In ACNS, 2006.
8. P. Barford, J. Kline, D. Plonka, and A. Ron. A signal analysis of network traffic anomalies. In IMW, 2002.
9. S. Bellovin. Security Aspects of Napster and Gnutella. Invited Talk at USENIX Annual Technical Conference, 2001.
10. L. Bernaille, R. Teixeira, and K. Salamatian. Early Application Identification. In CONEXT, 2006.
11. R. Birke, M. Mellia, M. Petracca, and D. Rossi. Understanding VoIP from backbone measurements. In INFOCOM, 2007.
12. BitTorrent. http://www.bittorrent.org.
13. K. Cho, K. Fukuda, and H. Esaki. The Impact and Implications of the Growth in Residential User-to-User Traffic. In SIGCOMM, 2006.
14. CISCO. Cisco IOS NetFlow. http://www.cisco.com/web/go/netflow.
15. M. Collins and M. Reiter. Finding Peer-To-Peer File-sharing Using Coarse Network Behaviors. In ESORICS, 2006.
16. F. Constantinou and P. Mavrommatis. Identifying Known and Unknown Peer-to-Peer Traffic. In NCA, 2006.
17. DC++. http://dcplusplus.sourceforge.net/.
18. K. Defrawy, M. Gjoka, and A. Markopoulou. "BotTorrent: Misusing BitTorrent to launch DDoS attacks". In SRUTI, 2007.
19. eMule. http://www.emule-project.net.
20. M. Ester, H.-P. Kriegel, J. Sander, and X. Xu. A Density-Based Algorithm for Discovering Clusters in Large Spatial Databases with Noise. In KDD-96, 1996.
21. M. Iliofotou, P. Pappu, M. Faloutsos, M. Mitzenmacher, S. Singh, and G. Varghese. Network Monitoring using Traffic Dispersion Graphs (TDGs). In IMC, 2007.
22. IPP2P. http://www.ipp2p.org.
23. T. Karagiannis, A. Broido, M. Faloutsos, and K. Claffy. Transport Layer Identification of P2P traffic. In IMC, 2004.
24. T. Karagiannis, D. Papagiannaki, and M. Faloutsos. BLINC: Multilevel Traffic Classification in the Dark. In SIGCOMM, 2006.
25. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen. Sketch-based change detection: Methods, evaluation, and applications. In IMC, 2003.
26. A. Lakhina, M. Crovella, and C. Diot. Mining Anomalies Using Traffic Feature Distributions. In SIGCOMM, 2005.
27. P. Maymounkov and D. Mazieres. Kademlia: A peer-to-peer information system based on the XOR metric. In IPTPS, 2002.
28. M. Mellia, R. L. Cigno, and F. Neri. Measuring IP and TCP behavior on edge nodes with Tstat. Computer Networks, 47(1):1-21, 2005.
29. A. Moore and D. Zuev. Internet Traffic Classification Using Bayesian Analysis Techniques. In SIGMETRICS, 2005.
30. N. Naoumov and K. Ross. Exploiting P2P systems for DDoS attacks. In International Workshop on Peer-to-Peer Information Management, 2006.
31. Phoenix Labs. PeerGuardian. http://phoenixlabs.org/pg2/.
32. Prolexic. http://www.prolexic.com/content/moduleId/tPjJLKRF/ article/aRQNVcBH.html.
33. J. Rosenberg, J. Weinberger, C. Huitema, and R. Mahy. Simple Traversal of User Datagram Protocol Through Network Address Translation STUN, 2003. RFC-3489.
34. P.-N. Tan, M. Steinbach, and V. Kumar. Introduction to Data Mining. Pearson, 2006.
35. Y. Zhang, Z. Ge, A. Greenberg, and M. Roughan. Network anomography. In IMC, 2005.
36. M. Zhou, Y. Dai, and X. Li. A Measurement Study of the Structured Overlay Network in P2P File-Sharing Applications. In ISM, 2006.